cdd51482035873f363e40c58434b6ac321a79307698a84d8a6ed4a1da945fedc

General

Target

cdd51482035873f363e40c58434b6ac321a79307698a84d8a6ed4a1da945fedc
Size

104KB
MD5

ab2691f623b0349e6a5a3db5e331350d
SHA1

ce97028ffc45e0f3aece629a94e520371ccadbc0
SHA256

cdd51482035873f363e40c58434b6ac321a79307698a84d8a6ed4a1da945fedc
SHA512

4d3d847efde66cde56982395ef4adf165ea41450b528f1c15f60614a660fa8c163cf04736f8ff2273f82cfa78e97c1b8a7b91c45b56879bf864a2b9850580b90
SSDEEP

1536:zps4FXVz+as5UKD1yrXa+VBfFGielzBGvr+JEgtPm1H:zOGsas55ZF+ffFozBGD+JEgG

Score

N/A

Malware Config

Signatures

Files

cdd51482035873f363e40c58434b6ac321a79307698a84d8a6ed4a1da945fedc
.exe windows x86

1132dbbce3976887b961e5a82555652f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
ResumeThread
QueueUserAPC
Sleep
Process32Next
CreateFileMappingA
SetFileAttributesA
WriteFile
GetProcAddress
LoadLibraryA
GetModuleFileNameA
ExpandEnvironmentStringsA
CreateFileA
GetFileSize
ReadFile
GetLastError
FormatMessageA
DeleteFileA
GetCurrentProcess
CreateProcessA
CloseHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStringTypeW
SetEndOfFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP

advapi32

RegQueryValueExA
RegRestoreKeyA
RegOpenKeyA
RegSaveKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA

psapi

GetModuleFileNameExA
EnumProcessModules

msvcrt

_stricmp
_strupr

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1132dbbce3976887b961e5a82555652f

Headers

File Characteristics

Imports

kernel32

advapi32

psapi

msvcrt

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 68KB - Virtual size: 72KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 68KB - Virtual size: 72KB